203.86.123.246

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
89 reports
36 reporters · latest 2 hours ago
ISP
Chinatelecom global
Usage Type
Fixed Line ISP
ASN
AS64079
Domain Name
chinatelecom.cn
Country
🇭🇰 Hong Kong
City
Sham Shui Po, Sham Shui Po District
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
89 from 36 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 12 🇮🇩 Indonesia 8 🇧🇷 Brazil 5
Most common categories Port Scan 34 Hacking 18 IoT Targeted 5 Exploited Host 4 Brute-Force 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
9034/udp (1 or more attempts)
Port Scan
🇹🇼 kk_it_man
hack
Hacking
🇮🇩 leomardsy_
Port Scan
🇮🇪 RoboSOC
Realtek Jungle SDK Remote Code Execution Vulnerability, PTR: PTR record not found
Hacking
🇧🇷 diego
[rede-44-49] 11/09/2026-06:07:30.715085, 203.86.123.246, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇺🇸 HamSammich
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-11-09T07:13Z).
Port Scan
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [9034] (automated)
Port Scan
🇧🇷 diego
[rede-44-49] 11/09/2026-00:55:48.832454, 203.86.123.246, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇮🇩 leomardsy_
Port Scan
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 203.86.123.246
Hacking IoT Targeted
🇫🇷 Petre 21_ip
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇮🇩 leomardsy_
Port Scan
🇳🇱 EGP Abuse Dept
Port connection indicating compromised host
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 24.126.8.77
🇳🇱 193.47.62.69
🇳🇱 185.226.197.107
🇨🇭 179.43.153.18
🇮🇩 103.126.118.234
🇮🇪 86.40.61.35
🇷🇺 85.174.197.147
🇺🇸 66.132.186.246
🇲🇽 38.101.88.147
🇵🇾 200.3.255.90
🇳🇱 193.176.31.199
🇲🇱 153.67.69.127
🇺🇸 144.172.79.19
🇺🇸 137.184.219.69
🇵🇭 124.217.102.185
🇻🇳 115.78.130.116
🇮🇳 110.173.190.221
🇺🇸 109.105.209.50
🇨🇳 61.177.36.109
🇩🇴 38.95.86.206
feedback